Fix some non default LIB_DEPENDS With hat: portmgr6ca92592d5
squid -- Multiple vulnerabilitiesentered 2023-10-25
no CVE referenced
Port details
www/squid 7.7
HTTP Caching Proxy
Port info
- Maintainer
- timp87@gmail.com
- Packages
- latest: 7.7
- Upstream
- up to date
- Last update
- to 7.7 · c1ddf91668
- Quarterly
- 2026Q4: 7.7
- Formerly
- www/squid26 until 2007-02-07
- WWW
- https://www.squid-cache.org/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install squidinstalls 7.7 fromlatest; fromquarterly(2026Q4) 7.7- Port
# cd /usr/ports/www/squid && make install clean# make -C /usr/ports/www/squid config # change options first
- Size
- 2.5 MiB download · 7.9 MiB installed
- Depends on
- lang/perl5.42 5.42.3
- License
- GPLv2
- Creates
- user
squid, groupsquid - Options
- 25 of 39 on in the package: ARP_ACL AUTH_NIS CACHE_DIGESTS DELAY_POOLS DOCS EXAMPLES FOLLOW_XFF FS_AUFS FS_DISKD FS_ROCK GSSAPI_BASE HTCP ICAP ICMP IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_IPFW VIA_DB WCCP WCCPV2
Show the 14 options that are off
AUTH_LDAP AUTH_SASL AUTH_SMB AUTH_SQL DEBUG ECAP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE NETTLE STACKTRACES TDB TP_IPF TP_PF - pkg-message
Shown after installing
o You can find the configuration files for this package in the directory /usr/local/etc/squid. o The default cache directory is /var/squid/cache/. The default log directory is /var/log/squid/. Note: You must initialize new cache directories before you can start squid. Do this by running "squid -z" as 'root' or 'squid'. If your cache directories are already initialized (e.g. after an upgrade of squid) you do not need to initialize them again. o When using DiskD storage scheme remember to read documentation: http://wiki.squid-cache.org/Features/DiskDaemon and alter your kern.ipc defaults in /boot/loader.conf. DiskD will not work reliably without this. Last recomendations were: kern.ipc.msgmnb=8192 kern.ipc.msgssz=64 kern.ipc.msgtql=2048 o The pre-translated error pages are no longer included into the port. If you need them install www/squid-langpack port as well. o The default configuration will deny everyone but the local host and local networks as defined in RFC 1918 for IPv4 and RFCs 4193 and 4291 for IPv6 access to the proxy service. Edit the "http_access allow/deny" directives in /usr/local/etc/squid/squid.conf to suit your needs. o If AUTH_SQL option is set, please, don't forget to install one of following perl modules depending on database you like: databases/p5-DBD-mysql (MySQL) databases/p5-DBD-mysql4 (MariaDB) databases/p5-DBD-Pg databases/p5-DBD-SQLite To enable Squid, set squid_enable=yes in either /etc/rc.conf, /etc/rc.conf.local or /etc/rc.conf.d/squid Please see /usr/local/etc/rc.d/squid for further details. Note: If you just updated your Squid installation from an earlier version, make sure to check your Squid configuration against the 3.4 default configuration file /usr/local/etc/squid/squid.conf.sample. /usr/local/etc/squid/squid.conf.documented is a fully annotated configuration file you can consult for further reference. Additionally, you should check your configuration by calling 'squid -f /path/to/squid.conf -k parse' before starting Squid.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 7.7 | 7.7 | – |
| FreeBSD 15 | 7.7 | 7.7 | – |
| FreeBSD 14 | 7.7 | 7.7 | 7.7 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 7.7 | 7.7 | – |
| FreeBSD 14 | 7.7 | 7.7 | 7.7 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 7.7.Fixed (45)
Show 45 fixed
VuXML entries whose affected range the packaged version has left.
squid -- Exposure of sensitive information in cache managerentered 2022-09-26
Squid -- multiple vulnerabilitiesentered 2020-04-07
squid -- Vulnerable to HTTP Digest Authenticationentered 2019-11-19
squid -- Vulnerable to Denial of Service attackentered 2018-02-23
squid -- multiple vulnerabilitiesentered 2016-12-23
squid -- multiple vulnerabilitiesentered 2016-05-07
squid -- multiple vulnerabilitiesentered 2016-04-21
squid -- multiple vulnerabilitiesentered 2016-04-02
squid -- remote DoS in HTTP response processingentered 2016-02-24
squid -- SSL/TLS processing remote DoSentered 2016-02-18
squid -- TLS/SSL parser denial of service vulnerabilityentered 2015-09-18
no CVE referenced
squid -- Improper Protection of Alternate Path with CONNECT requestsentered 2015-07-06
squid -- Buffer overflow in SNMP processingentered 2014-09-18
squid -- denial of serviceentered 2013-07-15
squid -- denial of serviceentered 2012-12-28
squid -- Denial of service vulnerability in request handlingentered 2010-09-24
squid -- Denial of Service vulnerability in HTCPentered 2010-02-14
squid -- Denial of Service vulnerability in DNS handlingentered 2010-02-01
squid -- several remote denial of service vulnerabilitiesentered 2009-07-27
squid -- remote denial of service vulnerabilityentered 2009-02-09
Squid -- Denial of Service Vulnerabilityentered 2007-12-04
Squid -- TRACE method handling denial of serviceentered 2007-03-21
squid -- FTP server response handling denial of serviceentered 2005-11-01
squid -- Denial Of Service Vulnerability in sslConnectTimeoutentered 2005-09-04
squid -- Possible Denial Of Service Vulnerability in store.centered 2005-09-04
squid -- denial-of-service vulnerabilitiesentered 2005-06-03
squid -- possible abuse of cachemgr.cgientered 2005-05-19
squid -- DNS lookup spoofing vulnerabilityentered 2005-05-19
squid -- DoS on failed PUT/POST requests vulnerabilityentered 2005-04-10
squid -- correct handling of oversized HTTP reply headersentered 2005-02-08
squid -- buffer overflow in WCCP recvfrom() callentered 2005-01-28
squid -- possible cache-poisoning via malformed HTTP responsesentered 2005-01-24
squid -- HTTP response splitting cache pollution attackentered 2005-01-22
squid -- no sanity check of usernames in squid_ldap_authentered 2005-01-19
squid -- buffer overflow vulnerability in gopherToHTMLentered 2005-01-12
squid -- denial of service with forged WCCP messagesentered 2005-01-12
squid -- confusing results on empty acl declarationsentered 2004-12-23
squid -- possible information disclosureentered 2004-12-09
no CVE referenced
squid -- NTLM authentication denial-of-service vulnerabilityentered 2004-10-18
squid -- SNMP module denial-of-service vulnerabilityentered 2004-10-12
Buffer overflow in Squid NTLM authentication helperentered 2004-06-09
squid ACL bypass due to URL decoding bugentered 2004-03-26
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (428)
Fixup pkgnames. PR: ports/184440, ports/184441, ports/184442, ports/184443, ports/184444, ports/184445, ports/184446, ports/184447, ports/184448, ports/184449, ports/184450 Submitted by: mat Approved by: portmgr (bapt)bcc4614ebb
Fix typo in OPTIONS_DEFINE. (maintainer timeout) PR: ports/181982 Submitted by: mata4c1e7f849
Add NO_STAGE all over the place in preparation for the staging support (cat: www)85fbf21ec5
- convert to the new perl5 framework - convert USE_GMAKE to Uses Approved by: portmgr (bapt@, blanket)f7ec825618
Fix options conversion with bmake0542bfb06f
Convert to new options frameworkd83378e19e
- Add the vendor patch for SQUID-2012:1 (CVE-2012-5643) and update VuXML information accordingly - Bump PORTREVISION PR: ports/177773 Submitted by: Kan Sasaki Approved by: flo (mentor) Security: c37de843-488e-11e2-a5c9-0019996bc1f7f68dec9a0d
Change MAINTAINER to my FreeBSD.org address. Approved by: flo (mentor)f7cc9217e7
- Get rid of PTHREAD_CFLAGS and PTHREAD_LIBS (category: www) Approved by: portmgr2ad92eab94
Update cyrus-sasl2 to 2.1.26. This bumps shlib version of libsasl2.dda3fab6a5
Fix rc.d script to support systems before and after ${name}_fib is introduced into rc.subr. Bump PORTREVISION.
Feature safe: yesf81193cbbfIn the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.83eb2c3700- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav6f6fbe4bdf- Use PLIST_DIRSTRY for ETCDIR: configuration file (not in PLIST) is ETCDIR/squid.conf by default - Use ETCDIR - Make portlint happier - Bump PORTREVISION for PLIST change PR: ports/158524 Submitted by: sunpoet (myself) Approved by: Thomas-Martin Seck <tmseck@web.de> (maintainer)eff5d59e52
change all squid ports from CONFLICTS to CONFLICTS_INSTALL PR: ports/158194 Submitted by: Fedor A Borshev <fedor9@gmail.com> Approved by: maintainer262194a5fc
- Get Rid MD5 supporta9481afc8a
- Update to 2.7.STABLE9 - Update MASTER_SITES - Move default cache and log directories from $PREFIX/squid/ to /var/squid/ PR: 145674 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)f6eb936232
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#1d6b4b3f91
- Update to 2.7.STABLE8 PR: 144668 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)f72d71e852
Update www/squid and www/squid30 to address Squid HTCP Packet Processing NULL Pointer Dereference vulnerability (SQUID-2010:2)c0cd5f4cb7
Security patch for Squid advisory 2010:1, denial of service. Submitted by: maintainer (Thomas-Martin Seck <tmseck web de>)3f1f30c23c
- Implement OPTIONS vor SQUID_KERBEROS_AUTH and SQUID_NIS_AUTH - Add a CONFLICT with www/lusca-head - Make the Squid configuration directory world readable in new installations to ease use of cachemgr.cgi - Implement squid_conf in the rc script and document user settable variables PR: ports/141930 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)1680bea3d3
- Add squid_fib option for alternate routing tables PR: 140146 Submitted by: Alson van der Meulen <alson+bugs@waalsdorp.nl> (based on) Approved by: maintainer770fda5a40
- Update to 2.7-STABLE7 PR: 138941 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer) Feature safe: yesd3ea172568
- Update MASTER_SITE_SUBDIR PR: 136122 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)e63a1bce8e
- The squid_kerb_auth helper needs to know about the endianness of the system at compile time. Its author suggests to use -D__LITTLE_ENDIAN__ in the program's Makefile and this is the solution proposed in ports/131878. Since FreeBSD (and FreeBSD ports) might be used on big-endian architectures as well as on little endian architectures I decided to instrument an already present endianness - Bump PORTREVISION since this affects the content (and functionality) of the port's binary package. Pr: 133159 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)92531c1b9e
- Update 2.7.STABLE6 PR: 131431 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer) Security: http://www.vuxml.org/freebsd/9c2460a4-f6b1-11dd-94d9-0030843d3802.html57a14a35f2
- Remove conditional checks for FreeBSD 5.x and older Approved by: pav9168603ee2
- Update to 2.7.STABLE5 PR: 128253 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)3ef59d946b
- Update to 2.7.STABLE4 PR: 126413 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)1965ac2854
- Update to 2.7.STABLE3 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)b7b482db37
- Update to 2.6.STABLE21 PR: ports/125099 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)000ed5c09c
Refactoring and fixes regarding the squid_kerb_auth helper: - Move the content of files/patch-helpers-negotiate_auth_squid_kerb_auth-Makefile.in and -squid_kerb_auth.c to files/fix-kerberos.patch. - Implement additional configure check for the presence of gssapi/gssapi.h and gssapi.h and prefer the former over the latter in squid_kerb_auth.c. This is done to prevent a compiler warning on FreeBSD 7 and higher where gssapi.h is only present for compatibility reasons. - Actually enable the "negotiate" authentication method in Squid (thanks to John Marshall for pointing this out to the maintainer). Bump PORTREVISION for this change. Removed files: files/patch-helpers-negotiate_auth-squid_kerb_auth-Makefile.in files/patch-helpers-negotiate_auth-squid_kerb_auth-squid_kerb_auth.c PR: 124872 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)4193e70b91
- Fix build after Heimdal update on HEAD PR: 123782 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)d9a406ceda
- Fix a mistake I (the maintainer) had introduced regarding the installation of the cachemgr.conf.default file: instead of explicitly installing it I thought it would be enough to change an automake variable that served an entirely different purpose, namely hardcoding the path to the configuration in the cachemgr.cgi binary. - While at it: remove a no longer needed .sh reference from files/pkg-mes PR: 123573 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)270caa4970
- Update to 2.6STABLE20 PR: 123432 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)50bccdb821
- Update to 2.6.STABLE19 - Add a patch for Squid bug #2203 (Fixed in the 3.0 but not yet in the 2.6 series) - Update maintainer mail address PR: ports/122383 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)e4467f39ee
- Update to 2.6.STABLE18 PR: 119563 Submitted by: Thomas-Martin Seck <tmseck@web.de> (maintainer)e76f05e7db
Update to 2.6.STABLE17 PR: ports/118430 Submitted by: maintainer2c42e822cc
Apply vendor patch 11780 for SQUID-2007_2. Security: Denial of Service from trusted client Security: VuXML 6eb580d7-a29c-11dc-8919-001c2514716c Approved by: portmgr (erwin)dcd7ea8201
Remove support for OSVERSION < 54d5623ea35
- Remove unneccessary USE_GCC line Submitted by: Derkjan de Haan <haanjdj@gmail.com> Approved by: maintainer via private mail33bb7de5ae
- Update to 2.6.STABLE16 PR: 116165 Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)662ea1757e
- Update to 2.6STABLE15 + 5 vendors patches. See http://www.squid-cache.org/Versions/v2/2.6/changesets/ PR: ports/116093 Submitted by: maintainer961f9d778d
- Honor NOPORTEXAMPLES Approved by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)b5e87c03a7
- Update to 2.6.STABLE14 plus three patches (see http://www.squid-cache.org/Versions/v2/2.6/changesets/ for details) - Add two new authentication helpers: DB and squid_kerb_auth - Add the website mirrors to the list of download sites as a last resort in case the distfiles do not make it to the FTP mirrors in time - Update the mirror server list a bit after checking with the official list Submitted by: maintainer PR: ports/115453 (in followup)ff0343a5c4
- update to 2.6.STABLE13 - replace sunsite.auc.dk which is no longer serving Squid distfiles (cf fenner's distfile survey) and replace it with ftp.belnet.be. The Squid mirror list seems to have vanished (temporarily) during their website redesign spree but it used to be listed there as an official Belgian mirror. - remove files/extra-patch-changeset_11375 which was added in 2.6.1 Submitted by: Thomas-Martin Seck (maintainer) PR: ports/1127514d4711e32e
Add a patch for Squid bug #1814, see <http://www.squid-cache.org/bugs/show_bug.cgi?id=1814>. The patchset is a slightly modified version of the Squid patchset 11375. Notes: Since this patch conflicts with the ICAP patchset and only affects non-default configurations that have been compiled using the WITH_SQUID_SSL configuration option, apply the patch only when this option is enabled. Set IGNORE when both WITH_SQUID_SSL and WITH_SQUID_ICAP are defined. PR: 112054 Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer)4d7c38b497
- Update to 2.6.STABLE.12 PR: 110610 Submitted by: Thomas-Martin Seck <tmseck@netcologne.de> (maintainer) Security: http://www.vuxml.org/freebsd/c27bc173-d7aa-11db-b141-0016179b2dd5.htmlcd0b28485e